NewLifeSMP

1. Information We Collect

When you use NewLifeSMP services, we collect the following information:

Account Information

Discord account details (username, user ID, email, avatar) via OAuth2 authentication
Minecraft account details (username/IGN, UUID) when you link your account
Email address when you verify it for store purchases

Transaction Information

Purchase history, order details, and payment method type
Billing information is processed by Stripe and is not stored on our servers

Technical & Security Information

IP addresses used to access the portal and game server
Browser user-agent strings
Device information (screen resolution, language, platform) at checkout
Session data and login timestamps
Geographic location derived from IP address (city, region, country)

Gameplay Information

Play sessions (join/leave times, IP used)
In-game activity logs (commands, chat, interactions)
Whitelist application responses

2. How We Use Your Information

Service delivery: To provide access to the Minecraft server, deliver purchased items, and manage your account
Transaction processing: To process purchases, send receipts, and manage billing
Fraud prevention: To detect and prevent fraudulent transactions, chargebacks, and abuse. This includes logging identity and device information at checkout and correlating purchase data with gameplay data
Security: To monitor for unauthorized access, enforce server rules, and maintain audit trails
Communication: To send purchase receipts, account notifications, and whitelist updates via email and Discord DM
Dispute resolution: To compile evidence in response to payment disputes or chargebacks, which may be shared with payment processors

3. Information Sharing

We do not sell your personal information. We may share data with:

Stripe: Payment processing (governed by Stripe's privacy policy)
Resend: Transactional email delivery
Discord: Bot notifications and DMs related to your account
Payment processors: Transaction evidence submitted in response to disputes or chargebacks
Law enforcement: When required by law or to protect our rights

4. Data Retention

We retain your data for as long as your account exists or as needed to provide services. Transaction records and security logs are retained indefinitely for fraud prevention and dispute resolution purposes. If you wish to delete your account, contact us through Discord; note that transaction and security records cannot be deleted as they may be needed for legal or chargeback defense purposes.

5. Data Security

We implement reasonable security measures to protect your data, including encrypted database connections, secure authentication via OAuth2, and HTTPS encryption for all web traffic. Payment card details are handled entirely by Stripe and never touch our servers.

6. Cookies & Local Storage

We use session cookies for authentication (NextAuth session token). We do not use advertising or tracking cookies. The session cookie is essential for the service to function and is set only after you log in.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account (subject to retention requirements above)
Withdraw consent for non-essential data processing

To exercise these rights, contact us through our Discord server.

8. Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be announced on our Discord server.

10. Contact

For privacy-related questions or requests, contact us through our Discord server or at the NewLifeSMP portal.